Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/9c9f28-4f41-472d-a63e-a10a3a4963fb/1/QNVZGnW9aT6dO3ZoNL8HT3se7jo.mft
File: QNVZGnW9aT6dO3ZoNL8HT3se7jo.mft (raw, json)
Hash identifier: wKsymeKtwfoxTorU+UOuXadPxirXy3qaSgqMbMgLUpE=
Subject key identifier: 59:CF:68:7C:17:0B:3B:E7:8B:73:64:95:C3:6D:5A:A6:E0:47:E1:6E
Authority key identifier: 40:D5:59:1A:75:BD:69:3E:9D:3B:76:68:34:BF:07:4F:7B:1E:EE:3A
Certificate issuer: /CN=40d5591a75bd693e9d3b766834bf074f7b1eee3a
Certificate serial: 01993312224C151541DDF149BF184D338445
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QNVZGnW9aT6dO3ZoNL8HT3se7jo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/9c9f28-4f41-472d-a63e-a10a3a4963fb/1/QNVZGnW9aT6dO3ZoNL8HT3se7jo.mft
Manifest number: 0A87
Signing time: Wed 10 Sep 2025 10:00:50 +0000
Manifest this update: Wed 10 Sep 2025 10:00:50 +0000
Manifest next update: Thu 11 Sep 2025 10:00:50 +0000
Files and hashes: 1: QNVZGnW9aT6dO3ZoNL8HT3se7jo.crl (hash: mZ4AAXc08ulWft4vD8fxJhmfm7Xy9KLd7hvxj6THM7A=)
2: dmWwMKmVtBjrQ943YS9mH5Wi3ME.roa (hash: prLT1d+yXEMIyzM51qGGgQHR5qaRcSsmNt9aZioq8kg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/9c9f28-4f41-472d-a63e-a10a3a4963fb/1/QNVZGnW9aT6dO3ZoNL8HT3se7jo.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/9c9f28-4f41-472d-a63e-a10a3a4963fb/1/QNVZGnW9aT6dO3ZoNL8HT3se7jo.mft
rsync://rpki.ripe.net/repository/DEFAULT/QNVZGnW9aT6dO3ZoNL8HT3se7jo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 10:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:33:12:22:4c:15:15:41:dd:f1:49:bf:18:4d:33:84:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40d5591a75bd693e9d3b766834bf074f7b1eee3a
Validity
Not Before: Sep 10 10:00:50 2025 GMT
Not After : Sep 11 10:00:50 2025 GMT
Subject: CN=59cf687c170b3be78b736495c36d5aa6e047e16e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:c5:e0:fe:ca:3a:cd:fd:05:9d:7a:32:be:4b:
5b:0c:26:74:1b:20:4c:83:38:b1:07:b1:56:51:d8:
d2:bc:ba:9d:7a:4c:6b:bd:b7:9b:4e:c4:bc:cd:a3:
9a:3a:82:0d:64:57:d0:86:db:e6:b1:3c:3b:0f:cb:
d0:2e:da:88:e8:98:38:7e:b8:c4:48:a7:79:2d:09:
a9:5a:fd:ce:4d:0c:9c:d9:28:db:09:c3:3b:bb:9e:
56:72:7b:ff:fb:4a:08:0f:37:a7:14:ee:88:d8:02:
24:4d:21:20:8d:85:19:03:91:4c:e6:fa:04:1a:39:
7c:92:18:db:cc:f7:fa:51:23:0e:aa:95:0f:49:52:
2a:41:74:dc:f2:6d:aa:51:64:0d:c0:29:5a:b0:d4:
53:d6:2e:ea:53:f0:e3:6c:78:d1:94:0d:7b:09:28:
1b:92:77:bd:4b:d1:f8:00:66:ce:01:61:0b:b6:ea:
15:fc:a2:54:7e:65:23:e9:f2:a3:c3:49:90:5a:01:
84:f5:c1:f4:bb:f6:d0:21:cd:39:93:d4:dc:0b:b6:
9b:0f:09:61:08:39:b9:86:b4:b2:e2:af:19:bc:56:
47:54:44:58:cd:1b:bd:ac:f4:e6:c9:41:91:01:e0:
0b:16:ca:31:52:86:e0:40:99:be:95:f0:60:c3:e9:
ab:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:CF:68:7C:17:0B:3B:E7:8B:73:64:95:C3:6D:5A:A6:E0:47:E1:6E
X509v3 Authority Key Identifier:
keyid:40:D5:59:1A:75:BD:69:3E:9D:3B:76:68:34:BF:07:4F:7B:1E:EE:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QNVZGnW9aT6dO3ZoNL8HT3se7jo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/9c9f28-4f41-472d-a63e-a10a3a4963fb/1/QNVZGnW9aT6dO3ZoNL8HT3se7jo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/9c9f28-4f41-472d-a63e-a10a3a4963fb/1/QNVZGnW9aT6dO3ZoNL8HT3se7jo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:84:4a:ca:e6:fe:5a:9e:6e:00:a3:f9:00:31:14:27:59:2d:
92:72:da:25:4f:d8:db:c1:86:aa:07:5f:f4:3a:50:9f:f4:da:
4e:80:0a:34:de:f2:7f:96:22:ab:84:ca:af:f3:6b:61:38:11:
d8:1f:d1:9c:f8:fb:6c:b6:20:57:3d:9f:2b:fd:28:e7:cb:cb:
52:69:7f:a6:b2:69:79:a0:f0:68:1f:1d:ca:3c:7c:a5:4a:67:
2a:0d:94:3a:16:03:b9:85:15:5b:d5:c1:e4:e2:4b:a5:4e:c7:
44:7c:e6:c5:c3:24:95:55:4f:fd:29:04:0b:55:f1:ec:03:ac:
d1:fc:e3:c5:f9:e4:98:76:5b:c9:1c:ba:3b:18:46:e2:0e:6d:
1f:e8:4e:ba:42:29:61:c8:84:51:af:b8:ee:1c:56:5c:f7:08:
20:52:d6:60:95:7e:8b:1f:d9:f3:67:95:cb:5a:8e:86:05:12:
e8:fb:e7:94:d5:e5:97:60:86:66:07:8d:50:ec:e8:54:88:1c:
7b:60:dc:7c:39:7e:9f:c4:96:47:a2:de:9e:cd:83:61:a7:0c:
5f:c7:c8:48:7d:cf:e6:ab:4a:1c:77:8c:11:70:15:5f:6c:40:
21:d3:c9:9c:42:ed:2b:48:f7:82:87:dd:7a:da:00:b8:4f:08:
89:18:4a:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 17:29:15 2025 by rpki-client